Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6BRZCjuZ9jXOvRCf5qNAtZUnc9U.roa
File: 6BRZCjuZ9jXOvRCf5qNAtZUnc9U.roa (raw, json)
Hash identifier: hH+YXUvWgsGelrXFnwRrdQU0hFJUqgQuWJuA6QekgIA=
Subject key identifier: E8:14:59:0A:3B:99:F6:35:CE:BD:10:9F:E6:A3:40:B5:95:27:73:D5
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0187DB0976A5F422A6CBE0A44142DFAE5D55
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6BRZCjuZ9jXOvRCf5qNAtZUnc9U.roa
Signing time: Tue 02 May 2023 05:57:23 +0000
ROA not before: Tue 02 May 2023 05:57:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.164.0/24 maxlen: 24
62.72.168.0/24 maxlen: 24
62.72.177.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 08:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:09:76:a5:f4:22:a6:cb:e0:a4:41:42:df:ae:5d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 2 05:57:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e814590a3b99f635cebd109fe6a340b5952773d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:ae:4b:5a:be:38:68:5e:92:e6:07:15:5a:
c7:22:4e:ff:c9:66:9d:b1:70:bb:b0:04:00:15:36:
98:3b:5b:6c:28:89:04:b0:b7:17:20:62:57:5f:36:
3a:be:41:d0:7b:cb:d4:15:b3:83:37:25:36:c6:00:
a6:1f:57:e2:eb:cc:92:bc:b7:8e:4d:51:b4:ff:83:
b6:3c:97:44:28:84:66:cf:45:ec:a9:7d:b6:a6:3f:
f2:07:e1:c5:4a:1e:6e:4b:ab:a0:21:60:23:6c:ea:
6b:cb:e2:1e:97:c4:30:83:0d:18:9a:b5:d9:1e:8e:
85:25:05:d9:14:73:25:cb:e9:38:2f:09:99:0b:58:
a2:cb:55:01:e9:87:59:b6:89:3a:de:69:b3:20:7c:
57:e1:aa:85:de:33:dd:c1:9f:85:d7:4f:8e:18:f6:
db:05:29:2e:59:cc:0d:b4:1c:2c:12:ed:31:75:7b:
98:04:e3:a5:ac:ce:d3:d4:e5:3a:73:7b:86:e8:98:
38:dd:98:ed:78:a9:7e:27:07:b6:83:ad:16:23:09:
e4:3c:83:54:23:7a:00:ff:82:b3:fa:dd:63:d7:e1:
61:14:01:98:04:3a:95:10:76:1c:ee:43:04:99:34:
09:81:68:96:94:23:14:ab:da:5f:08:25:3b:25:33:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:14:59:0A:3B:99:F6:35:CE:BD:10:9F:E6:A3:40:B5:95:27:73:D5
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/6BRZCjuZ9jXOvRCf5qNAtZUnc9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.164.0/24
62.72.168.0/24
62.72.177.0/24
62.72.184.0/24
176.57.51.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d8:3c:37:d9:8c:6f:16:37:23:7d:5c:0c:2d:ea:36:8d:55:
94:7b:81:f5:54:c5:0d:98:8a:60:0b:56:11:f8:cd:59:bc:c6:
ff:37:21:d8:e7:79:78:27:99:a4:81:49:03:25:e3:94:97:6f:
b3:ae:ce:e2:ab:ac:0d:8d:b2:41:d3:1f:8b:53:bb:5d:1e:45:
b9:11:9e:a8:46:db:d8:87:ed:c5:0b:7d:b3:66:61:fa:c1:b7:
5d:e5:39:d9:40:1b:7a:91:7c:55:c4:e9:e5:ce:5d:50:09:00:
b4:65:3b:d3:1e:42:b9:16:05:6b:02:59:e4:4f:81:f4:3e:3e:
94:87:fd:1e:6d:33:d1:7a:56:1c:52:fd:95:1f:3a:c2:12:05:
1b:b8:f8:8f:99:31:5e:8b:f8:2e:f2:6d:00:50:b1:c2:f0:85:
6d:8a:e1:e3:93:e3:a8:60:5e:82:28:bb:7b:23:06:4d:4f:30:
a4:cc:a4:33:f1:ab:14:e2:69:da:d3:36:b0:b4:eb:f4:1d:cd:
79:e2:f3:04:a7:ea:c2:81:89:fc:68:59:be:4f:91:d4:be:59:
53:fb:64:ca:f4:b5:78:60:79:ed:73:6d:e9:aa:44:41:6c:81:
8d:ef:8d:1d:a7:7e:18:6b:b0:bf:8d:af:de:18:35:68:55:1a:
0f:52:b2:a2
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYfbCXal9CKmy+CkQULfrl1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNTAyMDU1NzIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODE0NTkwYTNiOTlmNjM1Y2ViZDEwOWZlNmEzNDBiNTk1Mjc3M2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbWuS1q+OGhekuYHFVrHIk7/yWad
sXC7sAQAFTaYO1tsKIkEsLcXIGJXXzY6vkHQe8vUFbODNyU2xgCmH1fi68ySvLeO
TVG0/4O2PJdEKIRmz0XsqX22pj/yB+HFSh5uS6ugIWAjbOpry+Iel8Qwgw0YmrXZ
Ho6FJQXZFHMly+k4LwmZC1iiy1UB6YdZtok63mmzIHxX4aqF3jPdwZ+F10+OGPbb
BSkuWcwNtBwsEu0xdXuYBOOlrM7T1OU6c3uG6Jg43ZjteKl+Jwe2g60WIwnkPINU
I3oA/4Kz+t1j1+FhFAGYBDqVEHYc7kMEmTQJgWiWlCMUq9pfCCU7JTMmpwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFOgUWQo7mfY1zr0Qn+ajQLWVJ3PVMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvNkJSWkNqdVo5alhPdlJDZjVxTkF0WlVuYzlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAPkikAwQA
PkioAwQAPkixAwQAPki4AwQAsDkzAwQAsDk/MA0GCSqGSIb3DQEBCwUAA4IBAQAc
2Dw32YxvFjcjfVwMLeo2jVWUe4H1VMUNmIpgC1YR+M1ZvMb/NyHY53l4J5mkgUkD
JeOUl2+zrs7iq6wNjbJB0x+LU7tdHkW5EZ6oRtvYh+3FC32zZmH6wbdd5TnZQBt6
kXxVxOnlzl1QCQC0ZTvTHkK5FgVrAlnkT4H0Pj6Uh/0ebTPRelYcUv2VHzrCEgUb
uPiPmTFei/gu8m0AULHC8IVtiuHjk+OoYF6CKLt7IwZNTzCkzKQz8asU4mna0zaw
tOv0Hc154vMEp+rCgYn8aFm+T5HUvllT+2TK9LV4YHntc23pqkRBbIGN740dp34Y
a7C/ja/eGDVoVRoPUrKi
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org